5d501d3c51576a402a301470f7bf919b87e0f8a0ed40172dde3d7c1c622ccdc3

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/10/2026, 04:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AuthWebhook/CircuiTranspon.exe
Size 108KB
Sample261010-exynlsfe86
SHA256 5d501d3c51576a402a301470f7bf919b87e0f8a0ed40172dde3d7c1c622ccdc3
MD5 a3d2a2cdfe0f51e0194de4e66f5a4e59
SHA1 9e74abf1cb6ce8d4d8fd1a564fac9dfa3df806bc
SHA512 5cdb2276cc69fff03ae7ee7566f46e3fc0603d0f7e0337f39f089ebdfa4563cfa6cdb8c83c3839c5767212578cc195f87d19a903ed50e26c7ca6643db5489005
SSDEEP 1536:5x38QUYa1eDrFhKweJ13+V7XIw9mBiL5axtuA4Bd6JVoJGLn05UuiFCMR10NTkGr:PDijCUfjyMr17C0IEnOnDLCg/taX21
TLSH
T1DDB33A21B7449827E972D1776AF8FF294A2CE0B0479110DF72682DCDA9709D31D3A1EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CircuiTranspon.exe

C:\Users\Admin\AppData\Local\Temp\AuthWebhook\CircuiTranspon.exe
"C:\Users\Admin\AppData\Local\Temp\AuthWebhook\CircuiTranspon.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads